This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Og-PsLxASJt9bApQqAuDdap4xrA.roa File: Og-PsLxASJt9bApQqAuDdap4xrA.roa (raw, json) Hash identifier: H866UHA7Oi18Z70pnFIGSODq9aMn+rk4IRTNVlDHOp0= Subject key identifier: 3A:0F:8F:B0:BC:40:48:9B:7D:6C:0A:50:A8:0B:83:75:AA:78:C6:B0 Certificate issuer: /CN=3183785916cd98d7c770d685145499a8a0a15722 Certificate serial: 019B7B355D3EA9815F5E17DC52ABA0D84B3E Authority key identifier: 31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Og-PsLxASJt9bApQqAuDdap4xrA.roa Signing time: Thu 01 Jan 2026 20:17:33 +0000 ROA not before: Thu 01 Jan 2026 20:17:33 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 12310 IP address blocks: 85.120.152.0/23 maxlen: 23 85.121.14.0/23 maxlen: 23 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.mft rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 20 Jan 2026 18:00:41 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:7b:35:5d:3e:a9:81:5f:5e:17:dc:52:ab:a0:d8:4b:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3183785916cd98d7c770d685145499a8a0a15722 Validity Not Before: Jan 1 20:17:33 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=3a0f8fb0bc40489b7d6c0a50a80b8375aa78c6b0 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:bd:24:a2:e5:6c:35:e5:4a:a5:fb:b6:72:3f: 42:bd:a5:c2:b2:d4:e3:01:80:7d:f6:5e:a8:02:0c: e0:f7:02:09:1c:42:e2:98:23:3b:d5:d3:ae:f9:0e: ac:47:26:a0:ad:7d:fa:89:d1:6b:fb:30:b2:c5:53: 05:01:56:08:d0:33:e9:51:78:58:f5:d3:b5:79:cc: d4:a5:00:81:11:2c:7b:b7:1b:01:0b:6c:03:7b:0f: df:97:d4:aa:71:3e:39:fb:8e:9a:5c:c9:4d:b2:97: b6:5f:2e:56:5a:15:ae:d9:99:34:72:63:9d:1f:d8: 2b:5e:70:0b:55:fb:22:04:d0:cf:bd:8b:7a:5d:a9: 55:f0:78:61:b5:e6:91:86:b1:71:3c:95:a1:7a:1d: 54:2e:61:2e:fc:8e:a5:e7:00:d1:a5:15:b0:ef:82: de:96:74:e4:03:46:f5:2b:5d:25:d2:06:ef:af:36: 15:08:69:64:6c:d1:ee:84:fe:4a:a8:4f:5f:6d:cf: 11:f9:1d:18:90:71:bf:fb:69:ef:e9:e2:88:85:d3: da:31:5a:8c:46:e2:4e:58:5b:37:07:30:82:d9:01: 7e:e5:aa:03:6d:e7:21:63:0a:dc:c2:c8:e8:29:cd: 36:28:2e:1c:74:59:11:e9:d6:de:6a:a5:c2:2d:56: 9a:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 3A:0F:8F:B0:BC:40:48:9B:7D:6C:0A:50:A8:0B:83:75:AA:78:C6:B0 X509v3 Authority Key Identifier: keyid:31:83:78:59:16:CD:98:D7:C7:70:D6:85:14:54:99:A8:A0:A1:57:22 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MYN4WRbNmNfHcNaFFFSZqKChVyI.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/Og-PsLxASJt9bApQqAuDdap4xrA.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/15/7193db-7f85-42bb-b09a-f52c47c225db/1/MYN4WRbNmNfHcNaFFFSZqKChVyI.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 85.120.152.0/23 85.121.14.0/23 Signature Algorithm: sha256WithRSAEncryption 01:6a:6a:1f:5d:ce:3f:26:1c:cd:ef:e3:05:bd:6a:d2:e9:68: ed:9a:03:3c:ee:0e:9b:ae:74:e6:cc:4a:11:52:30:80:ca:85: 28:c4:4f:61:6b:0c:b3:97:4a:2c:c9:2a:31:93:4b:cf:1c:8a: 76:8a:aa:44:20:fe:b5:39:4b:9a:13:8a:c2:52:0b:58:b4:d4: f3:86:bc:e1:24:86:5e:dd:fb:ee:27:eb:a5:07:b4:0b:76:b0: 66:12:e8:bd:35:f6:6d:66:44:be:e3:84:4f:1a:f6:c1:20:83: 54:1d:b3:19:db:bb:a2:85:5c:ea:53:5d:07:19:86:ae:3b:6c: 7f:2d:11:bb:57:aa:53:b1:37:1f:ee:5c:33:d4:7e:2d:82:44: 2f:ea:9d:97:12:e6:31:b6:4f:86:b2:da:21:60:49:d1:83:66: f1:09:92:1e:cb:8d:29:6b:4a:d0:92:6d:53:cb:a8:fd:33:d2: 3a:2b:14:0f:a5:0a:39:de:e9:10:06:29:08:f1:a5:2e:94:35: 28:d2:96:3e:3c:09:ac:fb:50:a7:dc:2a:d9:05:9e:3c:25:f0: fd:a0:82:6c:1c:4a:42:84:a2:a9:21:fd:be:5a:bb:6e:9e:d2: a8:16:04:23:72:8e:4b:e1:1e:bf:fe:e9:52:be:4c:80:51:2a: 6a:97:c0:2c -----BEGIN CERTIFICATE----- MIIFAzCCA+ugAwIBAgISAZt7NV0+qYFfXhfcUqug2Es+MA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKDMxODM3ODU5MTZjZDk4ZDdjNzcwZDY4NTE0NTQ5OWE4YTBh MTU3MjIwHhcNMjYwMTAxMjAxNzMzWhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD EygzYTBmOGZiMGJjNDA0ODliN2Q2YzBhNTBhODBiODM3NWFhNzhjNmIwMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEA2r0kouVsNeVKpfu2cj9CvaXCstTj AYB99l6oAgzg9wIJHELimCM71dOu+Q6sRyagrX36idFr+zCyxVMFAVYI0DPpUXhY 9dO1eczUpQCBESx7txsBC2wDew/fl9SqcT45+46aXMlNspe2Xy5WWhWu2Zk0cmOd H9grXnALVfsiBNDPvYt6XalV8HhhteaRhrFxPJWheh1ULmEu/I6l5wDRpRWw74Le lnTkA0b1K10l0gbvrzYVCGlkbNHuhP5KqE9fbc8R+R0YkHG/+2nv6eKIhdPaMVqM RuJOWFs3BzCC2QF+5aoDbechYwrcwsjoKc02KC4cdFkR6dbeaqXCLVaaEwIDAQAB o4ICDzCCAgswHQYDVR0OBBYEFDoPj7C8QEibfWwKUKgLg3WqeMawMB8GA1UdIwQY MBaAFDGDeFkWzZjXx3DWhRRUmaigoVciMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEt ZjUyYzQ3YzIyNWRiLzEvT2ctUHNMeEFTSnQ5YkFwUXFBdURkYXA0eHJBLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC8xNS83MTkzZGItN2Y4NS00MmJiLWIwOWEtZjUyYzQ3YzIyNWRi LzEvTVlONFdSYk5tTmZIY05hRkZGU1pxS0NoVnlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQBVXiYAwQB VXkOMA0GCSqGSIb3DQEBCwUAA4IBAQABamofXc4/JhzN7+MFvWrS6WjtmgM87g6b rnTmzEoRUjCAyoUoxE9hawyzl0osySoxk0vPHIp2iqpEIP61OUuaE4rCUgtYtNTz hrzhJIZe3fvuJ+ulB7QLdrBmEui9NfZtZkS+44RPGvbBIINUHbMZ27uihVzqU10H GYauO2x/LRG7V6pTsTcf7lwz1H4tgkQv6p2XEuYxtk+GstohYEnRg2bxCZIey40p a0rQkm1Ty6j9M9I6KxQPpQo53ukQBikI8aUulDUo0pY+PAms+1Cn3CrZBZ48JfD9 oIJsHEpChKKpIf2+WrtuntKoFgQjco5L4R6//ulSvkyAUSpql8As -----END CERTIFICATE-----Generated at Tue Jan 20 02:48:01 2026 by rpki-client